Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: gXI6gcKSnpbhLZy85bfRvO1jhNPRaxyS1TR0f5P+KKc=
Subject key identifier: 8D:8C:C1:13:F6:52:E4:96:99:9A:DC:3B:BB:F3:F1:6A:69:4B:CE:88
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 019A4D74193C5F95FFF0D7EDB0720E5C9E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0D67
Signing time: Tue 04 Nov 2025 06:00:45 +0000
Manifest this update: Tue 04 Nov 2025 06:00:45 +0000
Manifest next update: Wed 05 Nov 2025 06:00:45 +0000
Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: ukUp1LPEF/XtX4l9mptesEua2HPCoF2rKGTNr5TLlto=)
2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:19:3c:5f:95:ff:f0:d7:ed:b0:72:0e:5c:9e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Nov 4 06:00:45 2025 GMT
Not After : Nov 5 06:00:45 2025 GMT
Subject: CN=8d8cc113f652e496999adc3bbbf3f16a694bce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:d5:c3:2b:84:07:05:a3:a3:37:01:04:e5:
c0:0c:87:43:c2:6f:3a:11:65:56:55:3f:e6:71:19:
45:4b:ba:c6:e7:fc:af:3a:fa:0e:78:78:8b:42:07:
c9:53:02:ca:85:af:4a:0d:07:7f:da:0e:46:06:d5:
ac:75:54:a9:66:d4:b6:00:d8:af:0b:e3:32:6b:a9:
96:b4:cd:1e:f2:7d:0f:49:73:05:2e:0c:66:f2:e0:
4f:a7:46:ac:94:21:ce:1c:8f:d1:47:3d:7a:01:de:
78:ac:a2:78:50:10:c3:f5:4c:f6:64:56:ad:26:55:
cd:82:be:25:27:fd:25:27:f7:74:7c:47:71:b1:1d:
7a:68:88:52:0f:7d:ee:3f:31:9d:f4:2a:10:ba:09:
9a:86:6e:d7:1e:5c:87:ab:f6:aa:85:74:81:66:03:
da:a8:6d:83:d7:43:9b:93:0d:c3:cb:9b:da:88:fb:
39:a3:bf:f5:59:a9:7a:96:b0:cb:d8:6a:89:2d:b0:
3e:ff:a7:45:3f:b3:23:2f:25:8a:00:99:9d:5d:38:
6e:b8:94:da:70:d5:26:4a:bb:1d:c9:fe:95:81:a4:
1a:b8:3e:d7:f3:17:e3:0a:fa:62:0e:30:b6:87:fb:
99:09:57:30:eb:3c:29:d0:43:f0:d0:e6:ae:e2:21:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:C1:13:F6:52:E4:96:99:9A:DC:3B:BB:F3:F1:6A:69:4B:CE:88
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6d:ab:4b:08:24:8b:8c:37:e0:bf:1c:79:c5:e5:00:f4:55:
99:4c:ea:e9:3a:3b:03:06:44:6a:45:93:06:d6:e5:0a:6b:03:
6d:75:22:37:14:be:48:0f:50:6b:1d:61:4c:c7:e5:f5:8b:20:
0c:35:23:25:0f:57:a7:85:e1:3c:7e:03:9c:80:ba:67:84:2b:
8c:20:88:95:fa:da:80:06:e9:80:e1:ba:a4:2a:23:f3:23:c1:
ab:00:80:da:9d:c3:5e:d3:03:da:95:4b:e6:48:35:12:f2:08:
7c:5f:39:ed:bb:02:ce:11:07:0a:ac:3a:20:43:d5:ef:ee:4b:
66:42:45:ed:37:31:8a:93:7e:0a:c0:55:e6:d4:1e:f3:77:12:
1f:b4:fc:6a:80:85:63:12:85:fd:33:3a:f0:b9:43:28:7f:ba:
78:e7:ca:f7:52:62:71:95:4c:ca:87:f6:ed:6c:36:90:b4:c7:
7b:21:a9:62:63:7b:c8:25:38:6a:7c:51:97:c4:c3:82:22:5c:
55:77:55:e5:83:20:ba:c0:2c:0c:10:83:02:8c:b2:c6:67:72:
ce:d4:f1:62:cf:05:0e:08:3a:7a:f7:68:e4:22:a3:94:ea:96:
48:48:02:f3:8a:e7:f1:e7:74:06:f3:87:9d:b4:8a:8b:ce:46:
37:70:8b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:27 2025 by rpki-client